Real-World Supply-Chain Security - Alex Leong, Buoyant

This talk, delivered by Alex Leong from Buoyant, addresses the critical elements of establishing supply-chain security within existing projects. Using the Linkerd project as a case study, the speaker explores the complexities involved in creating multi-architecture images with Rust and Go, the necessity for automated signing and attestation of artifacts, and the challenges faced due to an immature supply-chain ecosystem. Attendees will gain practical insights into the work required to enhance their own supply-chain security processes, as well as an understanding of the lessons learned from Linkerd's experience.